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IN THE CLAIMS 
1-49. (Canceled) 

50. (Currently amended) A method comprising: 

receiving at a network storage server, from a network storage client, a client 
request to perform an operation relating to a data set stored by the network storage 
server; 

in response to receiving the client request, determining in the network storage 
server whether to invoke a policy engine in relation to the client request, by determining 
whether the client request satisfies a specified criterion associated with a specified 
policy of the policy engine; 

if the client request is determined not to satisfy a specified criterion associated 
with a specified policy of the policy engine, then satisfying the client request by the 
network storage server without invoking the policy engine; whereas 

if the client request is determined to satisfy a specified criterion associated with a 
specified policy of the policy engine, then 

sending a screen request corresponding to the client request from the 
network storage server to the policy engine to cause the policy engine to apply the 
specified policy in relation to the client request or the data set; 

receiving at the network storage server, from the policy engine, a screen 
response indicating a result of the policy engine having applied the specified policy in 
relation to the client request or the data set; and 

sending a response to the client request from the network storage server 
to the network storage client in accordance with the screen response. 

51 . (Currently amended) A method as recited in claim 50, wherein the policy engine 
is implemented as a dedicated application server separate from the network storage 
server. 
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52. (Previously Presented) A method as recited in claim 50, further comprising: 
sending information relating to the data set to the policy engine with the screen 

request. 

53. (Previously Presented) A method as recited in claim 52, wherein the information 
relating to the data set comprises metadata of the data set. 

54. (Previously Presented) A method as recited in claim 50, wherein the screen 
request comprises a remote procedure call (RPC). 

55. (Currently amended) A method as recited in claim 50, wherein the network 
storage server and at least a portion of the policy engine are implemented in a single 
physical platform. 

56. (Currently amended) A method as recited in claim 50, wherein the client request 
is a request for a file managed by the network storage server. 

57. (Currently amended) A method as recited in claim 50, wherein the policy engine 
determines whether to approve or deny the screen request based on an identity of the 
network storage client. 

58. (Currently amended) A method as recited in claim 50, wherein the policy engine 
determines whether to approve or deny the screen request based on an identity of a 
user of the network storage client. 

59. (Currently amended) A method as recited in claim 50, wherein the policy engine 
determines whether to approve or deny the screen request based on an identity of the 
network storage server. 

60. (Previously Presented) A method as recited in claim 50, wherein the policy 
engine determines whether to approve or deny the screen request based on a quota. 
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61. (Previously Presented) A method as recited in claim 50, wherein the policy 
engine determines whether to approve or deny the screen request based on a number 
of times the data set has been accessed during a period of time. 

62. (Currently amended) A method as recited in claim 50, further comprising: 

using one of a plurality of storage protocols implemented by the network storage 
server to access the set of data, the plurality of storage protocols including a block-level 
storage protocol and a file-level storage protocol. 

63. (Currently amended) A system comprising: 
a network storage server; and 

a policy engine, implemented as a dedicated application server separate from the 
network storage server, coupled to communicate with the network storage server; 
wherein the network storage server is configured to 

receive a client request, from a network storage client, to perform an 
operation relating to a data set stored by the network storage server; 

determine whether to invoke a policy engine, in response to receiving the 
client request, by determining whether the client request satisfies a specified criterion 
associated with a specified policy of the policy engine; 

satisfy the client request, without invoking the policy engine, if the client 
request is determined not to satisfy a specified criterion associated with a specified 
policy of the policy engine; 

invoke the policy engine, if the client request is determined to satisfy a 
specified criterion associated with a specified policy of the policy engine, by sending a 
screen request, corresponding to the client request, to the policy engine; 

wherein the policy engine is configured to 

receive the screen request from the network storage server; 
wherein the screen request is configured to cause the policy engine to apply the 
specified policy in relation to the client request or the data set; and 
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send a screen response indicating a result of the policy 
engine having applied the specified policy in relation to the client request or the data 
set; 

receive the screen response from the policy engine; and 
send a response to the network storage client in accordance with the 
screen response. 

64. (Currently amended) A system as recited in claim 63, wherein the network 
storage server is further configured to: 

send information relating to the data set to the policy engine with the screen 
request. 

65. (Previously Presented) A system as recited in claim 64, wherein the information 
relating to the data set comprises metadata of the data set. 

66. (Previously Presented) A system as recited in claim 63, wherein the screen 
request comprises a remote procedure call (RPC). 

67. (Currently amended) A system as recited in claim 63, wherein the client request 
is a request for a file managed by the network storage server. 

68. (Currently amended) A system as recited in claim 63, wherein the policy engine 
is further configured to determine whether to approve or deny the screen request based 
on an identity of the network storage client. 

69. (Currently amended) A system as recited in claim 63, wherein the policy engine 
is further configured to determine whether to approve or deny the screen request based 
on an identity of a user of the network storage client. 
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70. (Currently amended) A system as recited in claim 63, wherein the policy engine 
is further configured to determine whether to approve or deny the screen request based 
on an identity of the network storage server. 

71. (Previously Presented) A system as recited in claim 63, wherein the policy 
engine is further configured to determine whether to approve or deny the screen request 
based on a quota. 

72. (Previously Presented) A system as recited in claim 63, wherein the policy 
engine is further configured to determine whether to approve or deny the screen request 
based on a number of times the data set has been accessed during a period of time. 

73. (Currently amended) A system comprising: 
a plurality of network storage servers; and 

a plurality of policy engines, each coupled to communicate with each of the 
network storage servers; 

wherein each of the network storage servers is configured so that, in response to 
receiving a client request to perform an operation relating to a stored data set, the 
network storage server responds by 

determining whether at least one of the policy engines should be invoked 
in relation to the client request, by determining whether the client request satisfies a 
specified criterion associated with a specified policy of at least one of the policy 
engines; 

if the client request is determined not to satisfy a specified criterion 
associated with a specified policy of at least one of the policy engines, the network 
storage server responds by satisfying the client request; whereas 

if the client request is determined to satisfy a specified criterion associated 
with a specified policy of at least one of the policy engines, the network storage server 
responds by 

sending a screen request corresponding to the client request from 
the network storage server to at least one of the policy engines to cause at least one of 
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the policy engines to apply a specified policy in relation to the client request or the data 
set; 

receiving at the network storage server a screen response 
indicating a result of applying the specified policy; and 

sending a response to the client request from the network storage 
server to [[the]] a network storage client in accordance with the screen response. 

74. (Currently amended) A system as recited in claim 73, wherein the network 
storage server is configured to select a particular one or more of the policy engines 
which should be invoked in response to determining that at least one of the policy 
engines should be invoked. 

75. (Currently amended) A system as recited in claim 74, wherein the network 
storage server stores a plurality of specified criteria associated with a corresponding 
plurality of specified policies, and wherein the network storage server is configured to 
select at least one of the policy engines which should be invoked, based on which one 
or more of the specified criteria are satisfied by the client request. 

76. (Currently amended) A system as recited in claim 74, wherein the network 
storage server is configured to select at least one of the policy engines which should be 
invoked based on a round-robin selection scheme. 

77. (Currently amended) A system as recited in claim 74, wherein the network 
storage server is configured to select at least one of the policy engines which should be 
invoked based on a load-balancing scheme. 

78. (Previously Presented) A system as recited in claim 73, wherein each of the 
policy engines is dedicated to applying a different set of one or more policies. 
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79. (Currently amended) A system as recited in claim 73, wherein at least one of the 
policy engines is configured to apply a specified policy in a manner that is dependent on 
which network storage server received the client request. 

80. (Currently amended) A system as recited in claim 73, wherein at least one of the 
policy engines is configured to determine whether to apply a particular specified policy 
based on which network storage server received the client request. 

81 . (Previously Presented) A system as recited in claim 73, wherein at least one of 
the policy engines applies a specified policy based on an identity of a client which sent 
the client request. 

82. (Previously Presented) A system as recited in claim 73, wherein the plurality of 
policy engines are implemented as a cluster. 

83. (Previously Presented) A system as recited in claim 73, wherein at least one of 
the policy engines comprises a cluster. 
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